General
- Target db3d1efecaea46af36f990b52293ca981acf5a14f1a2836677dcda846f18c6b0
- Size 589KB
- Sample260822-y1ymkatwfs
- SHA256 db3d1efecaea46af36f990b52293ca981acf5a14f1a2836677dcda846f18c6b0
- MD5 24f335a691c71456407c9f528a12af83
- SHA1 051491d102ea27a7af6b21c5c35181fa0a07e0fe
- SHA512 0d90eacae05720462f6633c1ccb8492e484e8c857582cf339cb291cd0915019a19325248c6fc843933eebb81cbb69668e1e13746f74a7d8f56abaf8f9165b1c3
- SSDEEP 12288:U97mmDmUefn1CvVkeClYRLwvcHk2c1IsPZO/1:UlxDmRnkvVkhYHk2c1DZu
- TLSH T17BD4BF01B6F2C072DA7654300936E735CEB87C21183699BB63DA1D5BBD70191DB3ABB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
db3d1efecaea46af36f990b52293ca981acf5a14f1a2836677dcda846f18c6b0.exe
Resource
win10v2004-20260513-en
0 signatures
60 seconds
Behavioral task
behavioral2
Sample
db3d1efecaea46af36f990b52293ca981acf5a14f1a2836677dcda846f18c6b0.exe
Resource
win11ltsc2024-20260709-en
0 signatures
60 seconds
Malware Config
Extracted
Family
-
remcos
Version
-
7.2.6 Pro
Botnet
-
DON32UPX
C2
-
217.60.195.33:17541
Attributes
-
audio_folder
MicRecords
-
audio_path
ApplicationPath
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
mouse_option
false
-
mutex
Rmc-QO96S8
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
- Target db3d1efecaea46af36f990b52293ca981acf5a14f1a2836677dcda846f18c6b0
- Size 589KB
- SHA256 db3d1efecaea46af36f990b52293ca981acf5a14f1a2836677dcda846f18c6b0
- MD5 24f335a691c71456407c9f528a12af83
- SHA1 051491d102ea27a7af6b21c5c35181fa0a07e0fe
- SHA512 0d90eacae05720462f6633c1ccb8492e484e8c857582cf339cb291cd0915019a19325248c6fc843933eebb81cbb69668e1e13746f74a7d8f56abaf8f9165b1c3
- SSDEEP 12288:U97mmDmUefn1CvVkeClYRLwvcHk2c1IsPZO/1:UlxDmRnkvVkhYHk2c1DZu
- TLSH T17BD4BF01B6F2C072DA7654300936E735CEB87C21183699BB63DA1D5BBD70191DB3ABB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10